agentsclimarketplace

Run1 csv security report generation

Skill cxcscmu/SkillLearnBench/skills/b3-teacher-feedback-gemini-3-flash-preview/dependency-vulnerability-check/run1_csv-security-report-generation

[COLM'26] SkillLearnBench is the first benchmark for evaluating continual learning methods that automatically generate agent skills.

Install
npx -y skills add cxcscmu/SkillLearnBench --skill run1_csv-security-report-generation

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

What its author says it does

Copied from the file, not written here

Formatting security audit findings into a standardized CSV format for reporting and compliance.

SKILL.md

1.2 KB, 240 tokens by cl100k_base, as published. Nobody here has run it

CSV Structure Requirements

The output must strictly follow the specified column order: Package,Version,CVE_ID,Severity,CVSS_Score,Fixed_Version,Title,Url

Handling Edge Cases

  • Missing CVEs: If a vulnerability has no CVE assigned, use the internal identifier (e.g., GHSA-xxxx-xxxx-xxxx).
  • Multiple CVEs: If one dependency has multiple vulnerabilities, each should be a separate row in the CSV.
  • Missing CVSS: If the tool does not provide a numeric CVSS score, check the reference URL or mark it based on the severity level if a range is known.
  • Fix Availability: If fixAvailable is false or null, the Fixed_Version column must explicitly state N/A.
  • Special Characters: Ensure fields containing commas (like Titles) are properly quoted to maintain CSV integrity.

Data Sanitization

Ensure that the CVSS_Score is a float or string representing the decimal score, and that the Severity is capitalized consistently (e.g., "HIGH", "CRITICAL") to meet reporting standards.

Keep looking

Skills are one crate of 328,083. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.